I believe this is real. I first heard about this a few weeks ago, as a "really damned good credit card scam targeting Royal Bank customers.", so while this 'could' be a version of that, the body is pretty honest, and sounds like a damned good scam.